db861ab80f7bc70079f9e524b43b2679_JaffaCakes118 | Triage

Sharing

General

Target

db861ab80f7bc70079f9e524b43b2679_JaffaCakes118
Size

64KB
MD5

db861ab80f7bc70079f9e524b43b2679
SHA1

9044b169551602506d4e907f379b336e1805ee10
SHA256

99e287e3a0ec188254cd794e667d7a31a8f852fbb7181f740019040eec50dfd2
SHA512

262187fa39102ec6b97f0ada38b3c4a3792e698b4ac55c6c5076218f57b2a0febfee4976de5e0f37b53145f68bf0faccb1d102c33570d23ef56d1a0aaa837e2c
SSDEEP

768:JC7ySwAvkHK8dsEC9GIRpVoYoGHyVpRRHOaC2OsXy0AEhe9PLS6cFK6bf:JNhEkq8d4toYoFHPH42bfSPLbc4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db861ab80f7bc70079f9e524b43b2679_JaffaCakes118

Files

db861ab80f7bc70079f9e524b43b2679_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp-md
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE